Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/ejUD_0Rknr4woJevM4ESFfT6cmY.roa
File: ejUD_0Rknr4woJevM4ESFfT6cmY.roa (raw, json)
Hash identifier: KIYQPQ22m4nr/PYzrRMgzESJd5+gDmq2tfL/ROodip8=
Subject key identifier: 7A:35:03:FF:44:64:9E:BE:30:A0:97:AF:33:81:12:15:F4:FA:72:66
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 0185795B8FCE1EFA43232F0D6EE3D8DD8BC5
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/ejUD_0Rknr4woJevM4ESFfT6cmY.roa
Signing time: Tue 03 Jan 2023 20:38:41 +0000
ROA not before: Tue 03 Jan 2023 20:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16019
IP address blocks: 185.95.118.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:79:5b:8f:ce:1e:fa:43:23:2f:0d:6e:e3:d8:dd:8b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Jan 3 20:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a3503ff44649ebe30a097af33811215f4fa7266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6b:a9:29:9c:68:7b:28:9e:75:28:f8:bc:0d:
48:1a:14:e4:cd:38:52:84:60:bf:91:90:29:46:59:
7a:41:73:a9:cb:a9:28:fb:8e:66:99:64:e1:51:f2:
9c:61:84:68:b0:63:aa:a2:f0:87:45:c4:11:68:bf:
3d:1f:45:45:ef:08:ef:0a:48:1e:3c:8e:68:ba:88:
26:b6:4b:d1:9c:1a:4b:0f:e8:ea:b6:0e:36:27:e7:
d1:05:9c:98:82:11:d8:3d:7c:c4:ee:c0:ca:46:47:
8f:ca:da:8c:2d:82:d9:c1:cd:69:d4:c2:50:0d:40:
0f:bd:21:df:dc:91:4b:6c:fc:07:a4:1b:08:41:69:
f3:7e:1c:0e:5e:97:ab:45:48:54:a0:a5:9b:6c:e3:
e8:c3:c2:c3:4c:10:c3:a8:3c:50:21:36:e8:8c:16:
3c:87:7e:9e:c4:3a:9e:83:46:83:b3:3b:54:71:27:
97:fd:c7:47:0b:eb:e3:3e:0a:78:9b:a9:a7:27:7c:
72:96:17:4a:6b:ba:48:bd:cc:0b:0b:fb:23:fd:df:
4c:23:12:76:3f:92:51:23:87:72:0e:06:ec:49:8a:
24:b9:c7:8a:ce:e0:45:ae:40:56:f4:cf:ae:82:dc:
ef:77:38:da:fc:ea:74:e5:d9:d3:b5:46:ec:d5:80:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:35:03:FF:44:64:9E:BE:30:A0:97:AF:33:81:12:15:F4:FA:72:66
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/ejUD_0Rknr4woJevM4ESFfT6cmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.118.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:c5:83:72:0b:96:31:d5:12:b3:e1:e8:7c:f1:c2:f2:7d:34:
8a:1b:b3:6d:aa:dd:07:74:86:5a:da:0a:7e:4f:58:7c:30:e8:
c0:90:67:a8:01:f1:74:de:a0:36:0c:56:49:f1:6f:d1:66:bd:
ba:36:9e:98:0b:5e:96:06:3e:f3:f4:82:b2:3d:ae:ad:56:76:
74:4b:44:69:f7:bd:79:5b:af:d6:9b:af:9d:c7:49:7d:06:84:
4f:57:de:21:e1:4d:08:04:e9:64:09:1c:b6:4e:ad:14:eb:13:
1d:a3:59:45:c1:4f:96:c9:a8:42:cc:e6:e5:96:8e:7a:ab:46:
f9:b9:4a:0a:36:b6:05:69:c8:12:62:9a:c2:56:1e:cc:bb:06:
e5:ed:42:5d:6a:c3:67:25:a3:7a:c0:13:4a:90:3d:6d:c7:35:
9c:b4:82:75:28:05:af:97:a8:a3:45:c1:bf:a6:57:08:eb:3d:
f8:c0:07:3d:47:c6:55:3a:40:6f:c8:ff:d1:36:f3:d4:b6:9f:
27:e7:3f:1f:3f:b1:d3:60:47:7d:da:92:ec:48:8d:de:0d:f8:
01:b3:9f:a4:80:d8:a0:ec:ca:34:38:14:51:80:66:68:7c:44:
1d:a3:be:df:b2:e9:34:a5:d9:64:b1:1d:be:20:51:b6:ee:0a:
3c:68:71:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:40 2024 by rpki-client on console-ams.rpki-client.org